Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/94afaa9b-8b12-3532-9e57-a95e27255498.roa
File: 94afaa9b-8b12-3532-9e57-a95e27255498.roa (raw, json)
Hash identifier: vTxL1iCe2uVsI1n5UmmMmYi5cUll9tCTe/Y08Xbs7DI=
Subject key identifier: 90:92:CE:69:BB:10:16:4B:71:A6:2D:61:E2:B5:A3:9B:C8:EA:24:B8
Certificate issuer: /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial: 010D0C9F43285845628D88B81E1918E6222DC780
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/94afaa9b-8b12-3532-9e57-a95e27255498.roa
Signing time: Sun 31 Mar 2024 01:00:26 +0000
ROA not before: Sun 31 Mar 2024 01:00:26 +0000
ROA not after: Sat 29 Jun 2024 01:00:26 +0000
asID: 60117
IP address blocks: 172.111.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:62:8d:88:b8:1e:19:18:e6:22:2d:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Validity
Not Before: Mar 31 01:00:26 2024 GMT
Not After : Jun 29 01:00:26 2024 GMT
Subject: CN=24928fd8-8536-4fce-86df-333660c0eede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f5:7e:5f:e7:d3:f4:c9:c5:66:e3:6b:fb:24:
7b:c4:7d:e5:a7:92:49:d9:32:89:60:db:01:c0:8c:
e3:d1:ad:24:e3:b3:b6:45:88:79:e2:b3:00:a5:1e:
b9:29:05:85:5e:8a:6a:4c:f7:af:1f:e2:2c:62:bb:
c6:a8:7a:30:70:2b:cf:e8:f7:d9:7f:79:05:8f:0d:
79:3e:ba:d7:83:15:1e:e8:b3:8e:41:bb:66:b1:f4:
fb:ea:8a:0b:8e:ef:9b:67:c4:cc:d4:0e:59:96:25:
1a:41:df:aa:2d:e8:f8:de:ae:10:e2:6f:a6:e7:38:
a5:d8:14:22:af:1f:31:5d:88:da:5d:c3:bc:7b:57:
f7:05:79:2a:c9:e4:97:d7:f9:6f:ec:5c:36:3b:79:
d6:df:ad:d7:f9:14:7b:32:07:00:dc:47:9b:4d:6c:
22:aa:b2:5b:61:a3:34:04:e6:80:76:3c:be:59:e8:
9c:68:ab:23:cf:02:1f:38:1d:cb:2c:7f:23:d9:e9:
c7:0a:4b:76:21:fb:36:0c:0b:c2:01:0c:3a:5f:1f:
20:40:2f:f3:bc:64:14:d9:d8:ec:34:6f:77:fc:20:
bd:b4:4e:e9:16:ad:e0:97:56:dc:84:8f:fc:0a:27:
9d:be:1b:79:05:f0:99:82:bf:fd:60:df:b8:b9:4e:
46:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:92:CE:69:BB:10:16:4B:71:A6:2D:61:E2:B5:A3:9B:C8:EA:24:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/94afaa9b-8b12-3532-9e57-a95e27255498.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
X509v3 Authority Key Identifier:
keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:94:bd:1a:73:13:8b:26:a1:7d:93:3d:b7:50:0b:5d:8a:fb:
b3:f7:76:6f:65:af:d2:dc:5c:67:38:fa:b7:87:ab:32:db:dd:
e0:08:c5:34:5c:df:bb:31:5b:78:97:cd:80:87:25:86:05:83:
0e:8d:2f:70:44:f7:8d:ca:2c:f0:e9:04:70:64:ec:5b:38:64:
2a:78:a2:c6:dc:3f:7d:43:0c:04:5b:c6:66:49:7a:76:17:ab:
aa:8c:ac:08:70:cb:a8:09:be:7d:74:1d:f3:0c:67:fb:45:dc:
01:cf:59:2d:8f:a3:bc:91:22:01:37:c2:74:5c:ee:2e:c4:69:
b4:fe:17:1b:e2:9c:e5:5b:64:3b:20:d6:f5:60:76:0c:a3:82:
c6:5d:41:22:32:74:57:a1:5f:50:60:14:c0:cf:43:88:f9:28:
7b:ba:36:bc:d4:d7:b1:83:02:87:f2:7c:a9:3b:16:bf:00:dd:
5f:ac:44:b4:e5:7b:c0:c2:70:31:fd:98:66:c5:05:55:66:50:
1c:8b:1b:c1:72:2f:3d:52:01:c7:e7:9d:2c:26:e6:a5:11:10:
45:2f:dd:96:52:c8:59:6c:96:5d:5f:70:89:7d:eb:db:68:98:
14:a2:03:fe:b4:3b:76:7c:23:10:4c:6e:3e:0f:66:af:b3:5e:
7c:b2:4c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:04:07 2025 by rpki-client